772 matches found
django-webauthn (0.0.1), greengrasssdk (>=1.5.0, <=1.6.0) +7 more potentially affected by CVE-2025-64076 via cbor2 (4.1.2)
cbor2 PYPI version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cbor2 and may be impacted: - django-webauthn 0.0.1 - greengrasssdk =1.5.0, =0.0.7, =2019.0.0a1.post0.dev0, =2019.0.0a1, =1.2.0rc2, =1.0.0rc2, =1.2.0 Source cves: CVE-2025-64076...
org.keycloak/keycloak-services: WebAuthn Attestation Statement Verification Bypass
A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object with fmt: "none", even when the realm is configured to require...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via manipulation of the Forwarded or X-Forwarded-Host headers used to construct password reset confirmation links. An attacker can gain unauthorized access to user accounts by tricking users into clicking a password reset...
Missing Critical Step in Authentication
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Missing Critical Step in Authentication in the WebAuthn Attestation Statement verification. An attacker can...
CVE-2025-62652
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
EUVD-2025-34941
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652
CVE-2025-62652 is a stored XSS in the Wikimedia Foundation MediaWiki WebAuthn extension (versions 1.39, 1.43, 1.44). The underlying issue is improper neutralization of input during web page generation, enabling stored Cross-Site Scripting. Affected component: WebAuthn extension for MediaWiki; imp...
CVE-2025-62652 Stored XSS in WebAuthn key name
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652 Stored XSS in WebAuthn key name
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
MediaWiki – WebAuthn Extension security vulnerabilities
Mediawiki - WebAuthn Extension is an open source two-factor authentication plugin for Mediawiki. A security vulnerability exists in Mediawiki - WebAuthn Extension versions 1.39, 1.43, and 1.44, which stems from improper input neutralization during web page generation and could lead to a stored...
PT-2025-42665
Name of the Vulnerable Software and Affected Versions MediaWiki WebAuthn extension versions 1.39, 1.43, and 1.44 Description A flaw exists in the MediaWiki WebAuthn extension related to improper input handling during web page generation, leading to a Stored Cross-site Scripting issue. This allows...
EUVD-2020-29108
Malware in sbrugna...
EUVD-2021-1997
Malware in sbrugna...
EUVD-2021-19508
Malware in sbrugna...
EUVD-2025-9009
Malicious code in bioql PyPI...
EUVD-2025-19088
Malicious code in bioql PyPI...